You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: learn-pr/wwl-sci/security-copilot-exercises/includes/9a-explore-embedded-entra.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -111,7 +111,7 @@ You're an identity admin with Woodgrove. You're a member of the helpdesk, and ju
111
111
112
112
You're an identity admin with Woodgrove. Your company has used many enterprise applications over the years, and some are no longer used. Your job is to track down unused application in your Microsoft Entra tenant, and remove them. You should research if there's any suspicious activity associated with the apps or their data as part of the work. Security Copilot in Microsoft Entra can help.
113
113
114
-
1. Open the simulated environment by selecting this link: **[Microsoft Entra admin center](https://app.highlights.guide/start/fdc34222-f2a2-4eb6-a8d0-b1085754e463?token=045faae1-1078-4eac-bf56-e12472eddaf9&azure-portal=true)**.
114
+
1. Open the simulated environment by selecting this link: **[Microsoft Entra admin center](https://app.highlights.guide/start/104c6555-1915-48d6-a05e-0783017959a0?token=045faae1-1078-4eac-bf56-e12472eddaf9&azure-portal=true)**.
115
115
1. Review the data provided on the **Microsoft Entra dashboard**.
116
116
1. Find the section on your **Identity Secure Score**.
117
117
@@ -135,7 +135,7 @@ You're an identity admin with Woodgrove. Your company has used many enterprise a
135
135
> While this simulation doesn't actively use these steps to remove application, you can see how Security Copilot can quickly help you remove unused applications.
136
136
137
137
1. Scroll up in the **Copilot window** to see the list of apps originally provided.
138
-
1. Find the application called **Woodgrove Intranet**, and then copy the owner’s name into your clipboard: **Braden Goudy (Corp)**.
138
+
1. Find the application called **Woodgrove Intranet**, and take note of the owner’s name: **Braden Goudy (Corp)**.
139
139
1. Close the **Security Copilot** window for now.
140
140
1. Select the **Favorites menu** from the menu on the left side of the screen.
141
141
@@ -159,7 +159,7 @@ You're an identity admin with Woodgrove. Your company has used many enterprise a
159
159
160
160
You're an identity admin with Woodgrove. You have been advised that the user Rovshan Hasanli might have some strange behavior when connecting to the Woodgrove site. You want to use the Audit Logs to research the activities.
161
161
162
-
1. Open the simulated environment by selecting this link: **[Microsoft Entra admin center](https://app.highlights.guide/start/104c6555-1915-48d6-a05e-0783017959a0?token=045faae1-1078-4eac-bf56-e12472eddaf9&azure-portal=true)**.
162
+
1. Open the simulated environment by selecting this link: **[Microsoft Entra admin center](https://app.highlights.guide/start/fdc34222-f2a2-4eb6-a8d0-b1085754e463?token=045faae1-1078-4eac-bf56-e12472eddaf9&azure-portal=true)**.
163
163
1. In the upper right side of the screen select the **Security Copilot button**.
164
164
1. Let’s start with a simple prompt like **Tell me about user Rovshan Hasanli?**.
165
165
1. We need to find out information about the user from the **Audit Logs**. Use the prompt **Show me Microsoft Entra audit log events initiated by that user in the last week** to find more information.
0 commit comments